Privacy Policy

This website and its booking and enquiry services are operated by Tilly Cook, a self-employed sole trader trading as Tilly Cook Choreography ("we", "us", "our"), Studio 6, London Road, Maidstone, Kent, ME16 8HR. You can contact us at [email protected].

This policy explains what personal data we collect when you use this website or make a booking or enquiry through it, how we use it, and the rights you have under the UK GDPR and the Data Protection Act 2018.

Information you give us: your name, email address and, if you provide it, your phone number, together with the content of any enquiry or message you send us.

Booking and payment information: the classes or services you book and a record of payment. Card payments are processed by Stripe; we do not see or store your full card details.

Technical and usage information: your IP address, device and browser type, and the pages you view, from essential cookies and our server logs, used to keep the site working and secure.

Analytics information: if you accept analytics cookies, Google Analytics collects information about how you use the site, such as the pages you visit, approximate location and device type. Your IP address is anonymised.

To perform a contract with you: to take and manage your bookings, process payments, deliver classes and services, and contact you about them.

For our legitimate interests: to respond to enquiries, keep the website and our services secure, and maintain ordinary business records.

To meet a legal obligation: to keep tax and accounting records, which we must retain for about six years.

With your consent: to load Google Analytics (analytics cookies) and to send any optional updates. We do not currently send marketing. You can withdraw consent at any time using the cookie banner.

We use the following service providers, who process personal data on our behalf and only on our instructions:

• Stripe — payment processing and fraud prevention

• Mailjet — sending booking confirmations and other service emails

• Storyblok — hosting the website's content

• Microsoft Azure — secure file and image storage

• Cloudflare — Turnstile checks that protect our contact and waiting-list forms from spam

• Google — Google Analytics, used only where you have accepted analytics cookies

• YouTube (Google) — hosting the portfolio videos, loaded in privacy-enhanced mode and only when you play one

• our website hosting provider

Some of these providers may process data outside the UK. Where they do, the transfer is covered by appropriate safeguards, such as a UK adequacy decision or the UK International Data Transfer Agreement.

We do not sell your personal data, and we only disclose it to others where the law requires it.

We keep enquiry correspondence for up to 12 months after our last contact with you.

We keep booking and payment records for about six years to meet tax and accounting requirements. After the relevant period we delete the data or keep it only in anonymised form.

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you

• ask us to correct data that is inaccurate or incomplete

• ask us to delete your data

• ask us to restrict or object to how we use your data

• ask us to transfer your data to another provider

• withdraw any consent you have given

To exercise any of these rights, email [email protected].

You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we have handled your data.

For details of the cookies this website uses and how to control them, see our Cookie Policy.

We may update this policy from time to time. The date at the top shows when it was last changed.

For any question about this policy or your personal data, contact [email protected].